CVE-2022-50852

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix use after free in mt7921_acpi_read()

Don't dereference "sar_root" after it has been freed.

A use-after-free issue exists in mt7921_acpi_read() where sar_root->package.count was dereferenced after sar_root had already been freed. Triggering it typically requires privileged control over ACPI/firmware-provided data (or equivalent device/boot-time control), making real-world exploitation unlikely for unprivileged users. The most realistic outcome is driver misbehavior or a crash in debug/sanitized builds. The bug is a read-after-free that only affects a return value.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.